From 3dab5aa3a78045d9232960bd91c5cd9d9c908435 Mon Sep 17 00:00:00 2001 From: Balazs Scheidler Date: Fri, 27 Oct 2023 13:35:52 +0200 Subject: [PATCH] syslog-ng: add workaround for CVE-2023-43804 Signed-off-by: Balazs Scheidler --- syslog-ng/alpine.dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/syslog-ng/alpine.dockerfile b/syslog-ng/alpine.dockerfile index cff8349ea9..22a91f5a44 100644 --- a/syslog-ng/alpine.dockerfile +++ b/syslog-ng/alpine.dockerfile @@ -73,6 +73,8 @@ RUN apk add --repository /axoflow -U --upgrade --no-cache \ syslog-ng-tags-parser \ syslog-ng-xml +RUN /var/lib/syslog-ng-venv/bin/pip install -U urllib3==1.26.18 + EXPOSE 514/udp EXPOSE 601/tcp EXPOSE 6514/tcp